Performance Logs and Alerts service terminated with service-specific error 2003

Although, Performance Logs and Alerts service aka ‘Perfmon service’ is an on-demand service, meaning it starts when it is needed; you would get a generic message whenever you try to start it. The message simply says that the service started and stopped because it has nothing to do.

However, you do get error while starting Perfmon service, like I did. Here is the error description:

The Performance Logs and Alerts service terminated with service-specific error 2003 (0x7D3).

If you go ahead and use ERR.exe utility to understand the the Hex code 0x7D3, you would get the description: ERROR_METAFILE_NOT_SUPPORTED

The solution: Incorrect permission on the registry.

Registry: HKLM\system\CCS\Services\SysmonLog\Log Queries.

Simply add the Network Service account on the above mentioned registry location and give write access.

Try again, service should start or at least give you the generic message.